Hi Mike,

I was able to import db with roles included this time, however, when I go to 
perform ca operations (such as issue or revoke certificate) it errors out with 
7731071. The httpd log shows:

Using configuration from /usr/local/openca.0.9.1/openca/etc/openssl/openssl.cnf
entry 2: invalid expiry date
unable to write 'random state'
Using configuration from /usr/local/openca.0.9.1/openca/etc/openssl/openssl.cnf
entry 2: invalid expiry date
unable to write 'random state'
Using configuration from 
/usr/local/openca.0.9.1/openca/etc/openssl/openssl/CA_Operator.conf
entry 2: invalid expiry date
unable to write 'random state'

This didn't happen before when the roles were missing. Can you help?


Dave Blaine

> From: "David W. Blaine" <[EMAIL PROTECTED]>
> Subject: Re: [Openca-Users] Database recovery after accidental init
> To: [EMAIL PROTECTED]
> MIME-Version: 1.0
> Content-MD5: jw9gMmPjzInel+LZTDj7rw==
> X-Spam-Score: 0.0 (/)
> X-Spam-Report: Spam Filtering performed by sourceforge.net. See 
http://spamassassin.org/tag/ for more details. Report problems to 
https://sf.net/tracker/?func=add&group_id=1&atid=200001 0.0 CLICK_BELOW          
  Asks you to click below
> X-BeenThere: [EMAIL PROTECTED]
> X-Mailman-Version: 2.0.9-sf.net
> X-Reply-To: "David W. Blaine" <[EMAIL PROTECTED]>
> List-Help: <mailto:[EMAIL PROTECTED]>
> List-Post: <mailto:[EMAIL PROTECTED]>
> List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, 
<mailto:[EMAIL PROTECTED]>
> List-Id: Ideas, tips and discussions about OpenCA installation and management. 
<openca-users.lists.sourceforge.net>
> List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, 
<mailto:[EMAIL PROTECTED]>
> List-Archive: 
<http://sourceforge.net/mailarchive/forum.php?forum=openca-users>
> X-Original-Date: Tue, 25 Nov 2003 10:51:35 -0500 (EST)
> Date: Tue, 25 Nov 2003 10:51:35 -0500 (EST)
> X-Perlmx-Spam: Gauge=XIIIIII, Probability=16%, Report="CLICK_BELOW, 
MAILTO_WITH_SUBJ, QUOTED_EMAIL_TEXT, SPAM_PHRASE_08_13, __CLICK_BELOW, __CT, 
__CT_TEXT_PLAIN, __HAS_MSGID, __HAS_X_MAILER, __KNOWN_MAILING_LIST, 
__MIME_VERSION, __SANE_MSGID, __X_BEENTHERE"
> 
> Hi Mike,
> 
> I was able to use a reply of yours from the mailing list (subject: current 
state 
> query) to recreate a valid backup using the structure you mentioned in your 
> reply. This allowed me to use the Recover DB feature to get all the 
certificates 
> into the DB. One question, however, none of the certificates have a Role 
> defined. How can this be fixed?
> 
> Dave Blaine
> 
> > From: Michael Bell <[EMAIL PROTECTED]>
> > User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3.1) Gecko/20030609
> > X-Accept-Language: en-us, en
> > MIME-Version: 1.0
> > To: [EMAIL PROTECTED]
> > Subject: Re: [Openca-Users] Database recovery after accidental init
> > Content-Transfer-Encoding: 7bit
> > X-Virus-Scanned: by amavisd-new at hu-berlin.de
> > X-Spam-Score: 0.0 (/)
> > X-Spam-Report: Spam Filtering performed by sourceforge.net. See 
> http://spamassassin.org/tag/ for more details. Report problems to 
> https://sf.net/tracker/?func=add&group_id=1&atid=200001
> > X-BeenThere: [EMAIL PROTECTED]
> > X-Mailman-Version: 2.0.9-sf.net
> > List-Help: <mailto:[EMAIL PROTECTED]>
> > List-Post: <mailto:[EMAIL PROTECTED]>
> > List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, 
> <mailto:[EMAIL PROTECTED]>
> > List-Id: Ideas, tips and discussions about OpenCA installation and 
management. 
> <openca-users.lists.sourceforge.net>
> > List-Unsubscribe: 
<https://lists.sourceforge.net/lists/listinfo/openca-users>, 
> <mailto:[EMAIL PROTECTED]>
> > List-Archive: 
> <http://sourceforge.net/mailarchive/forum.php?forum=openca-users>
> > X-Original-Date: Tue, 25 Nov 2003 14:29:59 +0100
> > Date: Tue, 25 Nov 2003 14:29:59 +0100
> > 
> > David W. Blaine wrote:
> > 
> > > I don't have a current backup of the database so how do I get the previous 
> > > certificates into the database?
> > 
> > If you have no database and no backup how do you store the certificates? 
> > The easiest way is to look into a backup (CERTIFIATES/VALID etc.) and 
> > create such a backup by hand or script it is not difficult.
> > 
> > Michael
> > -- 
> > -------------------------------------------------------------------
> > Michael Bell                   Email: [EMAIL PROTECTED]
> > ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
> > (Computing Centre)                        Fax:  +49 (0)30-2093 2704
> > Humboldt-University of Berlin
> > Unter den Linden 6
> > 10099 Berlin                   Email (private): [EMAIL PROTECTED]
> > Germany                                       http://www.openca.org
> > 
> > 
> > 
> > -------------------------------------------------------
> > This SF.net email is sponsored by: SF.net Giveback Program.
> > Does SourceForge.net help you be more productive?  Does it
> > help you create better code?  SHARE THE LOVE, and help us help
> > YOU!  Click Here: http://sourceforge.net/donate/
> > _______________________________________________
> > Openca-Users mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/openca-users
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?  SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to